Change Windows Update settings with SConfig
Use SConfig to choose how a BinaryLane Windows Server instance checks for and installs Microsoft updates.
This guide is for a single Windows Server instance. If you manage several Windows servers, use your normal management tooling, such as Group Policy, WSUS, Windows Admin Center, or another patch management tool.
Before you begin
You need:
- a BinaryLane Windows Server 2019, 2022, or 2025 instance
- an Administrator account on the server
- access through Remote Desktop, or console access if Remote Desktop is unavailable
- a maintenance window if you plan to install updates
Installing Windows updates can require a restart. Plan the change for a time when a restart will not surprise your users or customers.
Open SConfig
- Sign in to the Windows Server instance as an Administrator.
- Open PowerShell or Command Prompt as Administrator.
- Run:
sconfigBinaryLane Windows Server images use Windows Server Standard with Desktop Experience, so SConfig does not open automatically when you sign in.
Change the update setting
- In the SConfig main menu, choose Update settings.
Microsoft documents this as option 5.
- Choose the update behaviour you want:
| Setting | What it does | Menu choice |
|---|---|---|
| Automatic | Checks for updates and installs them automatically. | A or 1 |
| Download only | Checks for updates and downloads them, but does not install them automatically. | D or 2 |
| Manual | Does not check for updates automatically. | M or 3 |
Follow the label shown on your server. Microsoft documentation and SConfig screens can show either letters or numbers for these choices.
- Press
Enterto return to the main SConfig menu after the setting is saved. - To exit SConfig, choose Exit to command line.
Microsoft documents this as option 15.
Recommended setting
For many customer-managed servers, Download only is a practical default. It lets Windows download available updates while leaving you in control of when they are installed and when the server restarts.
Windows can notify you through Action Center when downloaded updates are ready to install, but only while you are signed in.
Install updates when you are ready
Changing the update setting does not install updates immediately.
When you are ready to scan for and install updates:
- Open SConfig.
- Choose Install updates.
Microsoft documents this as option 6.
- Choose the update category you want to scan for.
- Review the updates offered before installing them.
- Restart the server if Windows requires it.
SConfig can show feature update options in some Microsoft documentation, but do not treat SConfig as a general Windows Server upgrade tool. Plan operating system upgrades separately.
Confirm the setting
Reopen SConfig and check the Microsoft Update setting shown on the main menu.
You can also view installed updates from PowerShell:
Get-Hotfix | Sort-Object InstalledOnThis confirms installed hotfixes. It does not prove that every available update has been installed.
Troubleshooting
| Problem | What to check |
|---|---|
sconfig is not recognised | Open PowerShell as Administrator and try SConfig. Older Windows Server versions may use SConfig.cmd. |
| SConfig closes or returns to PowerShell | Run sconfig again from the same session. |
| You cannot use SConfig in a remote PowerShell session | Use Remote Desktop or console access instead. Microsoft does not support using SConfig from a remote PowerShell session. |
| The menu shows letters instead of numbers | Follow the label, not only the number. Choose Download only, shown as D on some SConfig screens and 2 on others. |
| Updates installed but the server is still pending a restart | Schedule a restart during your maintenance window. Some security updates are not fully applied until Windows restarts. |
Applies to
- BinaryLane Windows Server 2019
- BinaryLane Windows Server 2022
- BinaryLane Windows Server 2025
Last verified: 2026-05-22.